Remote Jobs RockRemote Jobs Rock

Application Security Researcher

📅 Jul 29
Application SecuritySecurity ResearchCode AuditingDesign Review
Apply Now

📜 Description

  • Conduct design reviews, code reviews, and dynamic analysis with development teams.
  • Identify vulnerabilities, communicate findings, and drive their resolution.
  • Research and advocate for security solutions and technologies.
  • Perform iterative security testing to evaluate products early.
  • Design and develop AI-powered tools to automate security processes.
  • Triage application vulnerabilities as an incident responder.

🛠️ Requirements

  • 3+ years of proven experience in AppSec research, including a deep understanding of major AppSec attacks, vulnerabilities and mitigations including SQL injection, Deserialization, RCE, etc or relevant military service.
  • 3+ years of proven experience with high-level code auditing on backend or relevant military service.
  • Familiarity with a wide range of programming languages (Go, JavaScript, TypeScript, etc) and Software Development Life Cycle (SDLC).
  • Hands-on experience in leveraging AI capabilities for Application Security.
  • Deep understanding of how to secure AI-powered applications.
  • Experience with cloud environments - specifically AWS and GCP.
  • Found a high-severity vulnerability in a popular app.
  • Familiar with mobile application platforms and APIs like Google Play, App Store.
Full job description

Moon Active is one of the world’s fastest-growing mobile game companies, providing entertainment to millions of active users across the globe. The company is headquartered in the heart of Tel Aviv.

We’re looking for an experienced Application Security Researcher to join our Security team. As an Application Security Researcher, you’ll take an active role in guiding our development teams to ensure Moon Active’s mobile games are designed and implemented securely. You'll be helping manage Moon Active’s secure development lifecycle in our products that serve millions of users daily. In your role, you will help secure the company’s use of AI and enable its safe adoption across the organization. At the same time, you will use AI extensively in your own work to improve the effectiveness and impact of security.

Responsibilities

  • Collaborate with the development teams to conduct design review, code review, and dynamic analysis.

  • Identify, communicate and drive the resolution of vulnerabilities.

  • Research and advocate for new security solutions and technologies.

  • Continue to drive early security evaluation by conducting iterative security testing.

  • Design and develop AI-powered internal security tools to automate security processes.

  • Operate as an incident responder for triage pertaining to applicative vulnerabilities.

Requirements

  • 3+ years of proven experience in AppSec research, including a deep understanding of major AppSec attacks, vulnerabilities and mitigations including SQL injection, Deserialization, RCE, etc or relevant military service.

  • 3+ years of proven experience with high-level code auditing on backend or relevant military service.

  • Familiarity with a wide range of programming languages (Go, JavaScript, TypeScript, etc) and Software Development Life Cycle (SDLC).

  • Hands-on experience in leveraging AI capabilities for Application Security.

  • Deep understanding of how to secure AI-powered applications.

Advantages

  • Experience with cloud environments - specifically AWS and GCP.

  • Found a high-severity vulnerability in a popular app.

  • Familiar with mobile application platforms and APIs like Google Play, App Store.

 

#LI-Hybrid

Asana

Product Security Engineer

🕒 20 days ago
Asana👥 10,000+ employees🏢 Software Development🤝 B2B

As a Product Security Engineer, you will partner with product and engineering teams to ensure secure software design, conduct security reviews, and develop frameworks that enhance security practices.

Application SecurityProduct SecuritySoftware EngineeringPython
Zscaler

Information Security Engineer (Thick Client Testing / Harness / VAPT)

🕒 4 days ago
Zscaler👥 10,000+ employees🏢 Computer And Network Security🤝 B2B

Lead penetration testing across applications and infrastructure, review security architectures, prioritize remediation with engineering teams, and build automation to uncover and reduce security risks.

Penetration TestingThick Client Security TestingWeb Application SecurityAPI Security
OpenAI

Enterprise Security Engineer, Vulnerability Management

🕒 18 days ago
OpenAI👥 10,000+ employees🏢 Research Services🧠 AI-native

Investigate and prioritize enterprise vulnerabilities, including zero-days, and drive verified remediation while building security automation and controls for AI agents across enterprise systems.

Vulnerability ManagementZero-day ResponseEnterprise SecuritySecurity Incident Investigation
Spotify

Security Engineer - Enterprise Security

🕒 19 days ago
Spotify👥 10,000+ employees🏢 Music

Strengthen enterprise security across identity, devices, networks, cloud services, and AI tools by identifying risks, building scalable security solutions, and partnering with teams across Spotify.

Enterprise SecurityIdentity And Access Management (iam)Single Sign-on (sso)Networking

Trusted by Remote Workers